Back Linuxsecurity

Security Update for Fedora 44

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

Streamlink is a command-line utility that pipes video streams from various

services into a video player, such as VLC. The main purpose of Streamlink is to

allow the user to avoid buggy and CPU heavy flash plugins but still be able to

enjoy various streamed content. There is also an API available for developers

who want access to the video stream data. This project was forked from

Livestreamer, which is no longer maintained.

Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77) HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA- vxq7-64xx-v4gw) Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g)

* Fri Sep 18 2026 Benjamin A. Beasley - 8.4.0-2 - Backport fix for urllib 2.8.0 compatibility

[ 1 ] Bug #2534200 - python-urllib3-2.8.0 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-700dc0d93d' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaw in Python urllib3 Exploited CISA has confirmed the exploitation of a critical vulnerability in the Python urllib3 library, affecting multiple Fedora versions. The vulnerability allows the TLS configuration for HTTPS proxies to be ignored or overridden, posing significant risks to data security. Additionally, two other issues could lead to unbounded memory buffering and infinite loops during streaming. The affected versions include python-urllib3 2.8.0, which has been updated to address these vulnerabilities. Users are urged to upgrade their systems immediately to mitigate risks. The vulnerabilities are rated high severity by upstream sources, with CVE identifiers GHSA-8988-9cw3-xx77, GHSA-vxq7-64xx-v4gw, and GHSA-gh4c-6fx4-qh6g. The updates are available via the dnf package manager. This incident highlights the urgency for system administrators to apply the patches to prevent potential exploitation. 5 sources 73

Security Update for Fedora 44

The full story

Extracted Entities

Companies (1)

Platforms (1)